CVE-2022-23409 in Logs Plugin
Summary
The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.
Reservation
01/18/2022
Disclosure
01/31/2022
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 192008 | Logs Plugin Controller.php actionStream information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2022-23409 |